On Tue, 19 Jan 2016, Richard Biener wrote:

> 
> The following should fix PR69352 where hash collisions make
> equal_mem_array_ref_p get refs it wasn't supposed to compare
> and will not compare correctly (those with variable indices).
> 
> Profiledbootstrap and testing running on x86_64-unknown-linux-gnu.

The following is an updated patch based on comments - handles
size == -1 properly as well as the reverse storage order flag.

Richard.

2016-01-19  Richard Biener  <rguent...@suse.de>

        PR tree-optimization/69352
        * tree-ssa-scopedtables.c (equal_mem_array_ref_p): Constrain
        max size properly.

        * gcc.dg/torture/pr69352.c: New testcase.

Index: gcc/tree-ssa-scopedtables.c
===================================================================
--- gcc/tree-ssa-scopedtables.c (revision 232519)
+++ gcc/tree-ssa-scopedtables.c (working copy)
@@ -225,7 +225,8 @@ avail_expr_hash (class expr_hash_elt *p)
                                               &reverse);
          /* Strictly, we could try to normalize variable-sized accesses too,
            but here we just deal with the common case.  */
-         if (size == max_size)
+         if (size != -1
+             && size == max_size)
            {
              enum tree_code code = MEM_REF;
              hstate.add_object (code);
@@ -261,15 +262,22 @@ equal_mem_array_ref_p (tree t0, tree t1)
   bool rev0;
   HOST_WIDE_INT off0, sz0, max0;
   tree base0 = get_ref_base_and_extent (t0, &off0, &sz0, &max0, &rev0);
+  if (sz0 == -1
+      || sz0 != max0)
+    return false;
 
   bool rev1;
   HOST_WIDE_INT off1, sz1, max1;
   tree base1 = get_ref_base_and_extent (t1, &off1, &sz1, &max1, &rev1);
+  if (sz1 == -1
+      || sz1 != max1)
+    return false;
+
+  if (rev0 != rev1)
+    return false;
 
-  /* Types were compatible, so these are sanity checks.  */
+  /* Types were compatible, so this is a sanity check.  */
   gcc_assert (sz0 == sz1);
-  gcc_assert (max0 == max1);
-  gcc_assert (rev0 == rev1);
 
   return (off0 == off1) && operand_equal_p (base0, base1, 0);
 }
Index: gcc/testsuite/gcc.dg/torture/pr69352.c
===================================================================
--- gcc/testsuite/gcc.dg/torture/pr69352.c      (revision 0)
+++ gcc/testsuite/gcc.dg/torture/pr69352.c      (working copy)
@@ -0,0 +1,40 @@
+/* { dg-do compile } */
+
+int a[10][14], b, c, d, e, f, g, h, i;
+void bar (void);
+int
+foo (int x)
+{
+  unsigned j;
+  int k = 0, l;
+  int m;
+  if (h)
+    m = 12;
+  else
+    m = 13;
+  if (a[x][m])
+    l = (long) foo;
+  a[x][i] = l;
+  while (c)
+    {
+      if (b)
+       {
+         if (f)
+           k = 1;
+         bar ();
+       }
+      for (; d;)
+       j++;
+    }
+  while (c)
+    {
+      if (a[x][12])
+       {
+         if (g)
+           k = 1;
+         j++;
+       }
+      c = e;
+    }
+  return k;
+}

Reply via email to